Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that after the drmschedinit function fails to initialize the scheduler, it still calls drmschedfini, resulting in the release of scheduler resources that are not fully initialized. This can potentially lead to...

Linux Kernel Security Vulnerabilities

The Linux kernel versions 6.1.107, 6.6.47, 6.9.7, and 6.10 have security vulnerabilities. These vulnerabilities stem from the ext4 file system, where during concurrent xattr operations using the ea inode option, an ABBA deadlock occurs between the transaction running in the ext4xattr inodecachefi...

PT-2026-94727

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt7921 Wi-Fi driver where a PCIe Advanced Error Reporting AER error can cause the bus to hang. When this occurs, register reads return 0xFFFFFFFF, which corrupts t...

PT-2026-94894

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs during driver detach in the rpmsg glink implementation. The device core holds a device mutex during the driver's remove callback chain. When the rpmsg endpoint is...

PT-2026-94825

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF subsystem for RISC-V architecture regarding extable handling for arena load acquire. The emit atomic ld st function returns a value that causes the caller to...

PT-2026-94889

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware where transport setup may enable callbacks before the setup routine returns. Specifically, mailbox chan setup registers the mailbox client via mb...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: deepin-system-monitor (UTSA-2026-109825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-109825 advisory. capdacreadsearchQt QTPLUGINPATHQTSTYLEOVERRIDE Qt DAC/etc/shadowSSHroot Tenable has extracted the preceding description block directly from the Unity Linux security...

CVE-2026-90360: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: regulator: core: use systemfreezablewq for init complete work scheduledelayedwork uses systemwq, which is non-freezable, allowing regulatorinitcompletework to run concurrently with system suspend. This work fires 30s after boot t...

PT-2026-94653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ARM architecture implementation where enabling PREEMPT RT Real-Time preemptibility without selecting HAVE POSIX CPU TIMERS TASK WORK causes CPU timers to expire in...

CVE-2026-93184: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ASoC: fslaudmix: rework runtime PM handling in probe After pmruntimeenable the AUDMIX block is powered off and stays suspended until the first runtime resume. Register writes issued between probe and the first resume e.g. from DA...

PT-2026-94446

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sparx5 driver where the sparx5 set rx mode function operates while holding the netif addr lock bh lock. During this process, it calls sparx5 mc sync or sparx5 mc...

PT-2026-94200

Name of the Vulnerable Software and Affected Versions NitroSense affected versions not specified PredatorSense affected versions not specified Description Insufficient access controls in a privileged service within the Acer System Monitoring component allow an authenticated local user to access t...

PT-2026-94199

Name of the Vulnerable Software and Affected Versions NitroSense affected versions not specified PredatorSense affected versions not specified Description Insufficient access controls within a privileged Named Pipe service in the Acer System Monitoring component allow an authenticated local user ...

PT-2026-95137

Name of the Vulnerable Software and Affected Versions SQLBot versions prior to 1.9.0 Description An authenticated uploader can upload an image/svg+xml assistant UI logo via the 'PATCH /api/v1/system/assistant/ui' endpoint. The system stores the SVG without sanitizing or validating embedded active...

PT-2026-95139

Name of the Vulnerable Software and Affected Versions SQLBot versions prior to 1.9.0 Description SQLBot is a Text-to-SQL system utilizing large language models and Retrieval-Augmented Generation RAG. An authenticated user can submit a crafted tableName value within the Excel datasource...

PT-2026-95025

Name of the Vulnerable Software and Affected Versions code-projects Matrimonial System version 1.0 Description A remote SQL injection exists in the /partner preference.php file. The issue occurs within the writepartnerprefs function when the education variable is manipulated, allowing an attacker...

CVE-2025-55787

A SQL injection vulnerability exists in MailData Email Archiving System v4.2 and earlier . This flaw allows an attacker to execute unauthorized SQL commands, potentially leading to high impact on confidentiality , integrity , and availability . While the vulnerability is confirmed in the provided...

EUVD-2025-210930

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

CVE-2026-54343: Improper Limitation of a Pathname to a Restricted Directory

Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.52.1, a remote attacker can request a traversal path handled by SCORMRenderer.render in lms/pagerenderers.py. The renderer constructs and opens a server-side path without first...

CVE-2026-50610: Improper Access Control

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications,...